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AMENDMENTS TO THE CLAIMS 

Please amend the claims as indicated hereafter. The present claim listing 
replaces all prior versions of the claims. 

Claims: 

1-28 (Canceled). 

29. (Currently amended) A method for authorizing execution of an object on a 
computer system comprising: 

(a) selecting an executable object on the computer system; 

(b) d e t e rmining th e pr e senc e or absence of inserting a first identifier m into a 
steganographic zone of the object, wherein the first identifier and the stenographic zone 
of the object are formed by the computer system and the first identifier prevents 
execution of the executable obiect : and 

(c) comparing the first identifier in the steganographic zone to a second 
identifier each time the obiect is selected for execution , wherein th e obj e ct i s e x e cut e d if 
an executable version of the obiect is created if the first identifier matches the second 
identifier. 

30. (Previously presented) The method of claim 29, wherein the identifiers 
comprise a sequence of fields for creating a unique copy of the object and an ownership 
token between the object and the system. 

31 . (Previously presented) The method of claim 29, wherein the second identifier 
is stored on the system. 
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32. (Previously presented) The method of claim 29, wherein the second identifier 
is stored on an external data storage structure. 

33. (Previously presented) The method of claim 29, wherein the first identifier is 
extracted from the steganographic zone of the object. 

34. (Previously presented) The method of claim 32, wherein the external data 
storage device comprises data for extracting the first identifier. 

35. (Previously presented) The method of claim 29, wherein the second identifier 
is encrypted. 

36. (Previously presented) A method for identifying unauthorized objects on a 
computer system comprising: 

(a) authorizing objects of the computer system by embedding a system 
identifier into the authorized objects; 

(b) determining the presence of the system identifier in objects of the 
computer, wherein objects that are not embedded with the system identifier are 
unauthorized; and 

(c) isolating unauthorized objects from the computer system. 

37. (Previously presented) The method of claim 36, wherein the identifiers 
comprise a sequence of fields for creating a unique copy of the object and an ownership 
token between the object and the system. 

38. (Previously presented) The method of claim 36, wherein the system identifier 
is stored on the system. 

39. (Previously presented) The method of claim 36, wherein the system identifier 
is stored on an external data storage structure. 
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40. (Previously presented) The method of claim 36, wherein the system identifier 
is embedded in a steganographic zone of the authorized object. 

41 . (Currently amended) The method of claim 36, wherein the system identifier 
is extracted from the steganographic zone of the object. 

42. (Previously presented) The method of claim 39, wherein the external data 
storage device comprises data for extracting the system identifier. 

43. (Previously presented) The method of claim 36, wherein the system identifier is 
encrypted. 

44. (Previously presented) A method for authorizing objects of a computer 
system comprising: 

(a) selecting a set of objects for authorization; 

(b) generating a system identifier, wherein the system identifier is 
generated by the computer system using object fields; 

(c) embedding the selected objects with the system identifier; 

(d) storing the system identifier; 

(e) determining the presence of the system identifier on objects on the 
computer system; 

(f) comparing detected system identifiers on the objects of the 
computer system with the stored system identifier; and 

(g) isolating objects without a detectable system identifier or with a 
system identifier that does not match the stored system identifier. 
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45. (Previously presented) The method of claim 44, wherein the system identifier 
comprises a sequence of fields for creating a unique copy of the object and an 
ownership token between the object and the system. 

46. (Previously presented) The method of claim 44, wherein the system identifier 
is stored on the system. 

47. (Previously presented) The method of claim 44, wherein the system identifier 
is stored on an external data storage structure. 

48. (Previously presented) The method of claim 44, wherein the system identifier 
is embedded in a steganographic zone of the object. 

49. (Previously presented) The method of claim 48, wherein the system identifier 
is extracted from the steganographic zone of the object. 

50. (Previously presented) The method of claim 47, wherein the external data 
storage device comprises data for extracting the first identifier. 

51 . (Previously presented) The method of claim 44, wherein the stored system 
identifier is encrypted. 

52. (Currently amended) A method for creation of authorized objects of a computer 
system comprising: 

(a) selecting an executable object for authorization; 

(b) retrieving a system identifier from a storage device; 

(c) embedding the selected object with the system identifier wherein 
the system identifier prevents execution of the obiect ^-aft4 

(d) storing data for retrieving the system identifier from the object on 
the storage device and generating an executable copv of the obiect each 
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time the object is selected for execution if the first identify matches the second 
identifier. 

53. (Previously presented) The method of claim 52, wherein the system identifier 
comprises a sequence of fields for creating a unique copy of the object and an 
ownership token between the object and the system. 

54. (Previously presented) The method of claim 52, wherein the system identifier 
is retrieved from an external data storage structure. 

55. (Previously presented) The method of claim 52, wherein the system identifier 
is embedded in a steganographic zone of the object. 

56. (Previously presented) The method of claim 54, wherein the external data 
storage device comprises data for extracting the first identifier. 

57. (Previously presented) The method of claim 52, wherein the stored system 
identifier is encrypted. 
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